1. Douligeris, C., & Mitrokotsa, A. (2004). A Survey of Denial of Service and Distributed Denial of Service Attacks. IEEE Communications Surveys & Tutorials, 6(1), 22–35. In Section III-A, "Bandwidth Depletion Attacks," the paper describes the Smurf attack: "The attacker sends a large number of ICMP echo request packets to the broadcast address of a network... with the source address forged to be the address of the victim." (p. 25). DOI: https://doi.org/10.1109/COMST.2004.5342238
2. CERT Coordination Center, Carnegie Mellon University. (1998). CERT® Advisory CA-1998-01 Smurf IP Denial-of-Service Attacks. Retrieved from the CERT/CC archives. This advisory states, "The smurf attack is a way of generating a large amount of ICMP echo reply traffic... The attacker sends ICMP echo request packets to the broadcast address of a network... with the source address forged to be the address of the victim."
3. Kurose, J. F., & Ross, K. W. (2017). Computer Networking: A Top-Down Approach (7th ed.). Pearson. In Chapter 1, Section 1.6, "Network Attack Types," the authors describe Denial-of-Service (DoS) attacks, including bandwidth flooding attacks like the Smurf attack, which uses ICMP packets sent to a broadcast address to generate a flood of replies to a victim.